Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: fDdQft6mZRlflhJdaOSTKkENiEq/GlBfsG5McGuWk08=
Subject key identifier: C9:B6:B1:AE:82:2A:1A:8B:46:B9:17:25:64:B3:96:11:74:02:F9:0B
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 0194BC72A61E6D2BD088CA8172500FBCF208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0734
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: ihiTs4hzVWqNNdSa4LhcvWUaNxeQQPgbyiFgHOukYV0=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:1e:6d:2b:d0:88:ca:81:72:50:0f:bc:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=c9b6b1ae822a1a8b46b9172564b396117402f90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:f4:83:58:ab:fb:fc:e9:ad:a8:8d:c8:05:
2d:51:c8:0b:93:bf:7c:ca:ba:7e:34:e6:76:f8:c0:
74:a3:d0:84:49:b1:3c:ea:37:63:04:7c:92:db:de:
b7:58:86:2b:81:30:2b:2b:43:68:2a:c6:d1:b6:c1:
c3:ee:be:b7:a9:d8:ca:71:12:c7:48:cc:55:64:96:
03:d5:35:fc:7c:7e:2c:9a:44:6b:5a:08:33:43:60:
73:70:95:9c:2c:77:f9:73:28:fa:a7:fe:96:a0:1a:
22:ac:35:2f:2a:a8:f7:15:f9:00:72:d3:e2:8e:77:
01:cb:30:ee:97:64:da:a9:26:17:05:92:1b:0a:f4:
1f:82:fd:e8:e3:9c:df:9f:d3:81:26:f7:52:1c:28:
88:4b:41:69:2f:5d:40:8d:f3:4c:12:eb:25:93:ef:
b3:fa:47:5d:e3:f9:1f:2b:4d:c9:07:9f:2d:fd:47:
82:c7:74:b3:0f:22:8c:b0:b8:0f:0e:36:4b:6d:a9:
c7:4f:f6:42:28:00:cc:84:d8:3e:1c:bc:15:62:3e:
eb:f4:57:f4:1e:8d:e1:76:44:fb:cc:54:76:53:c8:
c5:6f:f9:09:0e:fe:92:40:d1:55:8f:92:26:1b:39:
73:f5:06:38:1d:18:5f:e1:67:13:ae:80:07:34:44:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:B1:AE:82:2A:1A:8B:46:B9:17:25:64:B3:96:11:74:02:F9:0B
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:8d:50:eb:37:fc:9f:6c:23:24:53:82:0e:20:fd:c9:96:
58:4a:eb:8c:d3:77:7d:66:52:d5:b0:ab:06:26:7c:a6:07:9b:
99:cc:85:ae:dc:03:5f:7d:29:d0:64:76:ef:13:b8:30:0d:4d:
52:c8:c2:0e:28:a4:f0:e9:be:16:f2:cf:1b:b2:ff:07:3c:47:
b5:83:b8:d2:07:61:93:77:64:e4:da:66:3e:15:11:8e:a6:38:
eb:a4:20:04:c0:f8:c4:af:9a:c1:8a:6d:c1:dd:c2:f2:61:d1:
bc:f0:ac:09:21:bd:98:10:60:f9:31:7b:d8:96:1b:b5:14:56:
43:26:58:e0:88:df:65:06:ac:02:27:ca:79:96:de:ad:b4:79:
1e:df:3d:eb:11:c8:b2:0f:bd:38:5e:bc:fe:47:e1:78:35:40:
ef:09:9e:3a:15:34:2f:bd:98:c1:d6:d8:9c:0b:a6:f6:a8:f8:
36:c4:18:97:64:48:38:79:c8:12:b4:58:f1:25:4f:0b:d2:78:
62:66:ff:b7:b4:35:64:1f:dd:d6:37:fb:3a:9f:92:81:7e:23:
f8:81:13:ab:1a:cc:44:3e:bd:41:9c:36:3b:bc:e6:9c:62:23:
fe:49:f0:6b:78:a0:9e:05:16:45:c5:92:49:ee:7c:ed:0b:42:
39:ac:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:54 2025 by rpki-client